diff --git a/trunk/src/core/srs_core_protocol.cpp b/trunk/src/core/srs_core_protocol.cpp
index 69983cb54..b66f283da 100755
--- a/trunk/src/core/srs_core_protocol.cpp
+++ b/trunk/src/core/srs_core_protocol.cpp
@@ -2632,7 +2632,7 @@ int SrsUserControlPacket::decode(SrsStream* stream)
 	event_data = stream->read_4bytes();
 	
 	if (event_type == SrcPCUCSetBufferLength) {
-		if (!stream->require(2)) {
+		if (!stream->require(4)) {
 			ret = ERROR_RTMP_MESSAGE_ENCODE;
 			srs_error("decode user control packet failed. ret=%d", ret);
 			return ret;